IT · Cybersecurity
Cybersecurity and Ethical Hacking Fundamentals Internship
Learn defensive security and authorised testing in isolated, purpose-built lab environments.
A safety-first introduction to security operations, web risks, threat modeling and ethical assessment. All practical testing is limited to owned or explicitly authorised lab targets.
Program overview
Eligible branches: Computer Science and Engineering, Information Technology, Electronics and Communication Engineering, Other branches interested in defensive security
Target learner level: Learners beginning cybersecurity who can follow written lab scope and safe-use rules.
Prerequisites: Basic computer and networking familiarity · A commitment to written scope and authorised lab-only practice
Technologies and tools
Linux command line · networking and HTTP · threat modelling · OWASP Top 10 concepts · local sandbox testing · incident reporting
Practical assignments
- Map assets and identify risks for a documented toy environment
- Review a deliberately vulnerable local application within written scope
- Write a remediation-focused finding and retest a safe fix
Capstone project
Assess a provided sandbox target under explicit rules of engagement and produce a verified remediation report.
Expected deliverables
- Scope and safety acknowledgement
- Lab notes and non-sensitive evidence
- Prioritised findings with remediation guidance
- Retest results and residual-risk notes
- Defensive security presentation
Learning outcomes
- Explain common network and application security risks
- Run a scoped assessment against a controlled training target
- Write actionable findings with evidence and remediation guidance
Week-by-week curriculum
The program follows a 13-week core pathway. Weeks 14–15 are optional advanced work when the project scope calls for it.
Weeks 1–2
Orientation, fundamentals and setup
- Orientation, legal/ethical scope, rules of engagement and lab isolation
- Networking, Linux command line, identity/access basics and safe lab setup
Weeks 3–5
Core concepts and guided learning
- Threat modeling, security principles, risk and incident lifecycle
- Web architecture, HTTP, authentication and common secure-design failures
- Log reading, asset inventory, patch hygiene and defensive controls
Weeks 6–8
Intermediate concepts and practical exercises
- OWASP Top 10 concepts in intentionally vulnerable local applications
- Safe scanning, evidence capture and vulnerability validation within scope
- Secure configuration, access control and basic detection exercises
Weeks 9–11
Advanced topics, specialist tools and project development
- Security testing methodology, prioritization and false-positive management
- Incident triage, containment, reporting and remediation verification
- Plan an authorised lab assessment and develop a clear findings report
Weeks 12–13
Capstone completion, testing, documentation and evaluation
- Assess the provided sandbox target strictly within written scope
- Reproduce findings safely, verify fixes and document residual risks
- Present a remediation-focused report and conduct a peer review
Weeks 14–15 · Optional
Advanced extension and final presentation
- Add a defensive detection rule or secure-configuration improvement
- Retest the sandbox, refine severity reasoning and present lessons learned
Frequently asked questions
Is prior experience required?
The prerequisites listed on this page describe helpful preparation. The opening weeks include a guided refresher; learners should be ready to practise consistently and complete project work.
Does this permit testing real websites or networks?
No. Exercises are limited to provided or intentionally vulnerable local labs and explicit written scope. Testing third-party systems is not part of the program.